Welcome to SecureDrop’s documentation!¶
SecureDrop is an open-source whistleblower submission system that media organizations can use to securely accept documents from and communicate with anonymous sources.
Install SecureDrop¶
- Overview
- Terminology
- Passphrases
- Hardware
- Before you begin
- Create Tails USBs
- Set up the Secure Viewing Station
- Set up the Transfer Device
- Generate the SecureDrop Submission Key
- Set up the Admin Workstation
- Set up the Network Firewall
- Set up the Servers
- Install SecureDrop
- Configure the Admin Workstation Post-Install
- Create an admin account on the Journalist Interface
- Test the Installation
- Onboard Journalists
Checklists¶
Topic Guides¶
- SecureDrop Deployment Best Practices
- Promoting your SecureDrop Instance
- High Profile Announcement
- Provide a clear link on your homepage
- Provide Links at the Bottom of Your Articles
- Make an instructional video on how to access and use your SecureDrop
- Regularly share your SecureDrop landing page on social media
- Target potential whistleblowers with advertising
- Put an advertisement in your physical paper
- What Makes SecureDrop Unique
- Google Authenticator
- Useful Logs
- OSSEC Guide
- Tails Guide
- Setting up a Printer in Tails
- HTTPS on the Source Interface
- SecureDrop On-Site Training Schedule
- Using YubiKey with the Journalist Interface
- Backup and Restore SecureDrop
- Backup the Workstations
Upgrade SecureDrop¶
Developer Documentation¶
- Getting Started
- Virtual Environments
- Contributing Guidelines
- Tips & Tricks
- Internationalization (i18n)
- Getting Started with Weblate Translations
- Documentation Guidelines
- Testing SecureDrop
- Testing: Application Tests
- Testing: Configuration Tests
- Testing: CI
- SecureDrop apt repository
- Updating OSSEC Rules
- Generating AppArmor profiles for Tor and Apache
- Threat Model